ET Ducky

ET Ducky is a diagnostics platform that records kernel-level events on Windows and Linux endpoints, uses AI to determine the root cause of every alert in simple terms, and includes the remote desktop, alerting, and fleet management tools you'd expect from an RMM. Diagnostics is the core; the RMM tools are built around it.

Traditional RMM and monitoring agents poll counters and forward Event Log entries; they tell you what happened but not why. ET Ducky processes the kernel event stream on-agent (ETW on Windows, eBPF on Linux) and ships only curated evidence to the cloud, so an alert arrives with the actual cause already explained. Raw events never leave the machine and PII is filtered on-agent.

It's built for IT teams and MSPs who want to cut time-to-resolution on the tickets other tools can only describe by symptom, and to consolidate a traditional RMM, an APM/monitoring stack, and a behavioral-detection layer into one product. A free tier (bring your own AI key) is available; paid